$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft File: FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft (raw, json) Hash identifier: 1cHJMVLwVQafWj9nJaDKNVsmYZBeCJoMgd/keIe/rpU= Subject key identifier: AE:5F:3C:E3:E1:3F:98:13:7F:F1:F7:01:A3:6B:FC:8F:EB:E7:11:13 Authority key identifier: 15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE Certificate issuer: /CN=A91DBF0C/serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft Manifest number: 57 Signing time: Sat 29 Mar 2025 06:30:57 +0000 Manifest this update: Sat 29 Mar 2025 06:30:56 +0000 Manifest next update: Sat 05 Apr 2025 06:30:56 +0000 Files and hashes: 1: FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl (hash: d+r4cpLTQk9r9iWAdZ0or+Y+mjkqh1mxBp5o8RnBps8=) 2: 71DD0A968C8311EF81E2B476C4F9AE02.roa (hash: TXrkjJIwjX6s25tb57BHkFJUDyJD9PmCVoOhgLQta9Y=) 3: 8A06894A8C8211EF85B3A572C4F9AE02.roa (hash: k/RSQ+loZKSU/mNG3N6cRjY0FiE79Ik7PHvn92DtyVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0C Validity Not Before: Mar 29 06:30:56 2025 GMT Not After : Apr 5 06:30:56 2025 GMT Subject: CN=67e793a0-e198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c1:cc:94:77:f4:db:e8:e6:6a:a6:b6:1d:e0: 20:f0:c8:66:05:44:66:2a:93:df:54:63:b5:3c:38: 00:93:09:c3:0c:be:12:16:21:16:52:5f:1d:9c:ba: 8f:b2:e5:87:2c:d0:1a:11:ea:43:03:d4:88:75:b5: c8:b8:e1:37:cf:2f:18:43:1a:3e:31:5c:2f:1e:d9: 9c:62:f3:89:25:9b:ad:ff:e3:a7:69:99:10:3b:c7: b9:83:25:8d:f5:e8:a4:88:62:50:3e:93:32:69:db: 45:7c:78:95:a5:ea:46:9f:aa:73:84:0d:6a:45:ed: cb:79:51:d7:4e:24:79:a2:ef:6c:40:74:85:4d:4e: a6:8f:f0:47:3a:39:6c:18:bb:39:ca:ca:46:8c:7f: 78:b0:b4:85:7a:f8:37:c5:af:78:62:6d:c0:eb:7d: 39:ba:e0:a5:5f:32:75:23:fe:9c:c9:a5:0d:79:63: 11:b3:2a:22:2d:12:c9:9a:77:17:20:ed:73:86:37: a5:07:f5:9a:ed:4d:e5:05:d5:3e:85:06:91:b1:bd: 2a:12:e2:aa:84:d7:19:c4:6f:1d:56:12:5b:ec:55: 81:9f:67:8a:61:86:b8:2b:3d:21:86:92:87:bd:59: 10:a2:f6:03:e5:b7:e3:8c:4f:0d:49:8a:c6:bc:b0: 69:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5F:3C:E3:E1:3F:98:13:7F:F1:F7:01:A3:6B:FC:8F:EB:E7:11:13 X509v3 Authority Key Identifier: keyid:15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ab:8d:0f:01:72:48:02:07:ba:71:82:3e:aa:a4:7d:59:6c: 3e:d3:03:3d:9c:5f:10:32:b4:a4:eb:cc:0a:ee:f0:09:d9:b0: a3:30:5e:ca:9f:58:19:f0:d4:5b:24:e7:f2:7a:00:14:b7:2c: b2:32:ef:01:6f:af:0e:d6:33:80:69:e2:da:9b:14:0c:b0:f9: f3:68:15:75:67:db:fd:a5:11:c1:46:3d:40:0f:f9:05:4a:63: 2e:12:6f:b9:27:a6:2d:d3:60:67:f9:b2:85:3b:8d:e0:04:c7: 7b:40:da:a6:d9:66:01:fe:a5:5d:27:f5:67:48:97:7e:62:a0: df:ad:1d:6b:e0:31:4d:c9:e2:c8:b6:48:b3:6b:54:f3:63:03: 87:ce:1d:81:b3:ff:6d:a1:03:25:20:41:38:13:c5:f6:5b:fc: cf:62:84:39:95:c6:c6:ce:a0:7d:f2:9f:36:4b:65:16:7c:f1: 9e:53:7f:d0:ca:af:1e:e1:7a:b2:fa:d2:45:1b:16:85:53:88: 20:b6:67:d8:5e:a6:ae:e8:52:4e:d0:ae:99:38:7a:47:de:4f: 99:2f:28:5f:63:91:71:a5:7f:60:32:e4:4f:cd:e2:41:df:0f: a8:fc:ad:b2:56:32:b7:cd:2d:52:0f:d5:42:99:7c:c1:51:13: d1:31:66:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkYwQzExMC8GA1UEBRMoMTU0OEYxMDk1RjFFMEY5Qjc4NEIxQjdGREQ4RjBFNzU5 Qzg0MkRGRTAeFw0yNTAzMjkwNjMwNTZaFw0yNTA0MDUwNjMwNTZaMBgxFjAUBgNV BAMTDTY3ZTc5M2EwLWUxOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+wcyUd/Tb6OZqprYd4CDwyGYFRGYqk99UY7U8OACTCcMMvhIWIRZSXx2cuo+y 5Ycs0BoR6kMD1Ih1tci44TfPLxhDGj4xXC8e2Zxi84klm63/46dpmRA7x7mDJY31 6KSIYlA+kzJp20V8eJWl6kafqnOEDWpF7ct5UddOJHmi72xAdIVNTqaP8Ec6OWwY uznKykaMf3iwtIV6+DfFr3hibcDrfTm64KVfMnUj/pzJpQ15YxGzKiItEsmadxcg 7XOGN6UH9ZrtTeUF1T6FBpGxvSoS4qqE1xnEbx1WElvsVYGfZ4phhrgrPSGGkoe9 WRCi9gPlt+OMTw1Jisa8sGlFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrl884+E/ mBN/8fcBo2v8j+vnERMwHwYDVR0jBBgwFoAUFUjxCV8eD5t4Sxt/3Y8OdZyELf4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCRjBDLzRBMEZGQTk2OEM1 QjExRUZBNzA2NzU3RkM0RjlBRTAyL0ZVanhDVjhlRDV0NFN4dF8zWThPZFp5RUxm NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlVqeENWOGVENXQ0U3h0XzNZOE9kWnlFTGY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC RjBDLzRBMEZGQTk2OEM1QjExRUZBNzA2NzU3RkM0RjlBRTAyL0ZVanhDVjhlRDV0 NFN4dF8zWThPZFp5RUxmNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACmrjQ8BckgCB7pxgj6qpH1ZbD7TAz2cXxAytKTrzAru8AnZsKMwXsqf WBnw1Fsk5/J6ABS3LLIy7wFvrw7WM4Bp4tqbFAyw+fNoFXVn2/2lEcFGPUAP+QVK Yy4Sb7knpi3TYGf5soU7jeAEx3tA2qbZZgH+pV0n9WdIl35ioN+tHWvgMU3J4si2 SLNrVPNjA4fOHYGz/22hAyUgQTgTxfZb/M9ihDmVxsbOoH3ynzZLZRZ88Z5Tf9DK rx7herL60kUbFoVTiCC2Z9hepq7oUk7Qrpk4ekfeT5kvKF9jkXGlf2Ay5E/N4kHf D6j8rbJWMrfNLVIP1UKZfMFRE9ExZqQ= -----END CERTIFICATE-----Generated at Fri Apr 4 21:07:38 2025 by rpki-client